Skill UI

This comprehensive curriculum provides a detailed roadmap for mastering exploit development and vulnerability research. It covers fundamental techniques like fuzzy testing using AFL++, and progresses through advanced topics such as in-process fuzzing with Google FuzzTest. It is ideal for structuring professional security training programs or onboarding new research engineers.

This guide provides a comprehensive operational checklist for exploit development. It covers the entire lifecycle, from initial bug identification and vulnerability analysis (e.g., stack overflow, UAF) to payload development, mitigation bypass (ASLR, DEP, CFG), and reliable weaponization. Essential for security researchers developing Proof-of-Concept exploits and establishing a professional exploit development environment.

This comprehensive guide covers advanced fuzzing methodology, a core technique in exploit development. Learn how to use coverage-guided fuzzing with powerful tools like AFL++ and libFuzzer to automatically discover critical security vulnerabilities, such as memory corruption bugs. Ideal for setting up robust fuzz campaigns, optimizing corpus generation, and triaging complex vulnerability outputs.

A comprehensive reference and bypass catalog covering modern operating system kernel mitigations such as KASLR, SMAP, SMEP, KPTI, DEP/NX, and CFI. It details how these security mechanisms function, how to detect their presence, and advanced bypass techniques (e.g., side-channel attacks, ROP chains, information leaks). This skill is essential for security professionals conducting deep penetration testing, exploit development, and target hardening assessments.

This comprehensive guide serves as a reference for offensive security professionals developing custom x86/x64 shellcode. It details advanced concepts including Position-Independent Code (PIC), PEB traversal for API resolution, safe memory allocation (avoiding RWX), and sophisticated process injection methods (e.g., APC injection, threadless techniques). Learn how to bypass modern AV/EDR detection using advanced evasion techniques like API hashing, encryption, direct syscalls, and abusing PE structures.

A deep-dive curriculum into core memory corruption vulnerability classes, covering topics like stack/heap buffer overflows, Use-After-Free (UAF), integer overflows, and format strings. This guide uses real-world CVE case studies (e.g., QNAP, Chrome) to illustrate attack vectors, impact analysis, and modern mitigation techniques. Ideal for cybersecurity professionals, penetration testers, and students learning exploit development.

This skill establishes a local development loop for OneNote integrations. It uses Mock Service Workers (MSW) to intercept calls to the Microsoft Graph API, providing realistic, fixture-based responses (e.g., Notebooks, Sections, Pages). This allows developers to rapidly build and test OneNote features without needing live Azure credentials or worrying about rate limit restrictions during development cycles.

This skill provides a comprehensive Python guide to building a production-ready Virtual Cloud Network (VCN) on Oracle Cloud Infrastructure (OCI). It details the entire process from scratch, including creating the VCN, setting up Internet and NAT Gateways, configuring route tables, and defining Network Security Groups (NSGs). This is essential for engineers needing to provision complex, secure, and highly functional network architectures for development or production use.

This guide establishes an optimized local development loop for Oracle Cloud Infrastructure (OCI). It teaches users how to bypass the slow web console by setting up dedicated CLI profiles (dev, staging, prod), managing environment variables, and creating robust shell aliases. This allows developers to perform complex operations—such as listing resources, launching instances, and managing storage—directly from the terminal, ensuring speed and consistency across all environments.

This internal agent skill automates the complex process of determining the most likely owner or team for a bug cluster. It follows a strict 6-level precedence model, starting with cached overrides, and sequentially querying sources like Service Owners, Oncall status, CODEOWNERS, recent assignees, and committers. The process includes staleness detection and confidence scoring, providing highly accurate and auditable routing recommendations for internal development triage.

This comprehensive guide provides step-by-step instructions for installing and configuring the Palantir Foundry SDK. It covers both the Platform SDK for direct REST API data access and the OSDK for Ontology-based workflows. Users will learn how to set up authentication using OAuth2 client credentials or Bearer tokens, ensuring secure and seamless integration into their development environment for both production and development use cases.

A structured guide for setting up a robust local development environment for Palantir Foundry data pipelines. This workflow enables users to run Python transforms and unit tests using PySpark against sample data, and mock the Foundry API client, ensuring fast, isolated iteration cycles before deploying code to the official Foundry environment. Ideal for data engineers and developers building complex ETL logic.